Jason Cai wrote: > We just want to know how IBM zSecure could alter specific events based on > certain RACF information that is captured by SMF in real time without > dumping SYS1.MANX
What do you mean by 'alter'? What are you trying to solve? zSecure does NOT alter the records it gets from SYS1.MANx, but see below. >Could you give us a sample program to alter one specific events based on >certain information that is captured by SMF in real time ? Select your input (type = 'ACT.SMF') and your selection criteria, then go to the right page to get your report. Now place that report in a dataset. You can do that in batch or in TSO / ISPF. Then use whatever program or editing tool to 'alter' your records. Some components of zSecure (I think Command Verifier or something like that) may intercept some events and allow/disallow it instantly. Alternatively, you can go to RACF-L discussion list and ask your questions there. You can also go to "zSecure Suite" discussion list which is listed in this list of Security related forums: https://www.ibm.com/developerworks/community/forums/html/category?id=a4c83a8c-1106-418e-bcae-323eb6641707 But still, please tell us what do you mean by 'alter'. Groete / Greetings Elardus Engelbrecht ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
